Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'xrdrb.exe' = '%WINDIR%\system\xrdrb.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'xpfxuwrak.exe' = '%WINDIR%\system\xpfxuwrak.exe'
- %WINDIR%\system\xpfxuwrak.exe bfR
- %WINDIR%\system\xpfxuwrak.exe
- %WINDIR%\system\QBTool.exe ch
- %WINDIR%\system\QBTool.exe in
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\version[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\upgrade[1].exe
- %WINDIR%\system\xrdrb.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\AddNewSoft[1].txt
- %WINDIR%\system\QBTool.exe
- %WINDIR%\system\QB.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\media[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\version[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\AddNewSoft[1].txt
- %WINDIR%\system\QBTool.exe
- 'ap##.#eskwizz.com':80
- 'me###.#op-banners.com':80
- ap##.#eskwizz.com/QB6/version.txt
- ap##.#eskwizz.com/QB6/upgrade.exe
- me###.#op-banners.com/advertpro/servlet/view/dynamic/html/media?mi###########
- ap##.#eskwizz.com/QB6/AddNewSoft.txt
- DNS ASK ap##.#eskwizz.com
- DNS ASK me###.#op-banners.com
- ClassName: 'MozillaWindowClass' WindowName: ''
- ClassName: 'OpWindow' WindowName: ''
- ClassName: 'qbw' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''